Known vulnerabilities in sudo (Ubuntu package)
Vendor:
Canonical Ltd.
Software:
sudo (Ubuntu package)
Software CPE:
cpe:2.3:o:canonical:sudo_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Website:
https://www.ubuntu.com/
Total vulnerabilities:
12
Public exploits:
5
Known exploited (KEV):
2
Highest CVSSv4 Score:
8.7
Breakdown by Severity Chart
1.9.9-1ubuntu2.6
1.9.15p5-3ubuntu5.24.04.2
1.9.17p2-1ubuntu1.1
1.9.17p2-1ubuntu1
1.9.16p2-3ubuntu2
1.9.16p2-2
1.9.16p2-3
1.9.16p2-3ubuntu1
1.9.16p2-1ubuntu3
1.9.16p2-1ubuntu2
1.9.16-1
1.9.16-2
1.9.16p1-1
1.9.16p2-1
1.9.15p5-3ubuntu4
1.9.15p5-3ubuntu3
1.9.15p5-3ubuntu2
1.9.15p2-1
1.9.15p2-2
1.9.15p3-1
1.9.15p4-1
1.9.15p4-2
1.9.15p5-1
1.9.15p5-2
1.9.15p5-3
1.9.15p5-3ubuntu1
1.9.14p2-1
1.9.14p2-1ubuntu1
1.9.13p3-2
1.9.13p3-3
1.9.13p3-3ubuntu1
1.9.13p3-1
1.9.13p3-1ubuntu1
1.9.13p1-1ubuntu2
1.9.12p1-1
1.9.12p2-1
1.9.13p1-1
1.9.13p1-1ubuntu1
1.9.11p3-1ubuntu3
1.9.11p3-1ubuntu2
1.9.11p3-1
1.9.11p3-1ubuntu1
1.9.10-1
1.9.10-2
1.9.10-3
1.9.10-3ubuntu1
1.9.9-1ubuntu2
1.9.9-1ubuntu2.1
1.9.5p2-3+exp1
1.9.6-1~exp1
1.9.6-1~exp2
1.9.8p2-1~exp1
1.9.8p2-1
1.9.9-1
1.9.9-1ubuntu1
1.9.5p2-3ubuntu2
1.9.5p2-3
1.9.5p2-3ubuntu1
1.9.5p2-2ubuntu3
1.9.5p2-2ubuntu2
1.9.5-1
1.9.5p1-1
1.9.5p1-1.1
1.9.5p2-1
1.9.5p2-2
1.9.5p2-2ubuntu1
1.9.4p2-2ubuntu3
1.9.4p2-2ubuntu2
1.9.4-1
1.9.4p1-1
1.9.4p2-1
1.9.4p2-2
1.9.4p2-2ubuntu1
1.9.1-2
1.9.3-1
1.9.3p1-1
1.9.3p1-1ubuntu1
1.9.1-1
1.9.1-1ubuntu1
1.8.31p1-1
1.9.0-1
1.9.0-1ubuntu1
1.8.31-1ubuntu1.1
1.8.3p1-1ubuntu3.8
1.8.3p1-1ubuntu3.9
1.9.15p5-3ubuntu5
1.9.16p2-1ubuntu4
1.9.16p2-1ubuntu1
1.8.9p5-1ubuntu1.5+esm8
1.8.16-0ubuntu1.10+esm3
1.8.21p2-3ubuntu1.6+esm1
1.8.31-1ubuntu1.5+esm1
1.9.9-1ubuntu2.5
1.9.15p5-3ubuntu5.24.04.1
1.9.15p5-3ubuntu5.24.10.1
1.9.16p2-1ubuntu1.1
1.8.9p5-1ubuntu1.5+esm5
1.8.21p2-3ubuntu1.6
1.8.31-1ubuntu1.5
1.9.9-1ubuntu2.4
1.9.11p3-1ubuntu1.3
1.9.9-1ubuntu2.3
1.9.11p3-1ubuntu1.2
1.8.21p2-3ubuntu1.5
1.8.31-1ubuntu1.4
1.9.9-1ubuntu2.2
1.9.11p3-1ubuntu1.1
Ubuntu Pro (Infra-only)
1.8.3p1-1ubuntu3.10
1.8.9p5-1ubuntu1.5+esm6
1.8.31-1ubuntu1.2
1.9.1-1ubuntu1.1
1.8.21p2-3ubuntu1.4
1.8.16-0ubuntu1.10
1.8.21p2-3ubuntu1.3
1.8.31
1.8.27
1.8.21p2
1.8.16
1.8.9p5
1.8.3p1
1.8.31-1
1.8.31-1ubuntu1
1.8.27-1ubuntu4.1
1.8.21p2-3ubuntu1.2
1.8.16-0ubuntu1.9
1.8.27-1.1
1.8.28p1-1
1.8.29-1
1.8.29-1ubuntu1
1.8.27-1ubuntu4
1.8.27-1ubuntu1.1
1.8.21p2-3ubuntu1.1
1.8.16-0ubuntu1.8
1.8.27-1ubuntu3
1.8.27-1ubuntu2
1.8.16-0ubuntu1.7
1.8.16-0ubuntu1.6
1.8.26-1
1.8.26-2
1.8.27-1
1.8.27-1ubuntu1
1.8.23-1
1.8.23-2
1.8.23-2ubuntu1
1.8.21p2-3
1.8.21p2-3ubuntu1
1.8.21-1
1.8.21p2-1
1.8.21p2-2
1.8.21p2-2ubuntu1
1.8.8~b3-1
1.8.8~rc1-1
1.8.9~b1-1
1.8.9~b2-1
1.8.9~rc1-1
1.4.4-1
1.4.3-7
1.4.3-6
1.4.3-5
1.4.3-4
1.4.3-3
1.4.3-2
1.4.3-1
1.4.2-2
1.4.2-1
1.4.1-1
1.8.9p5-1ubuntu2.1
1.8.9p5-1ubuntu1.4
1.8.9p5-1ubuntu1.3
1.8.9p5-1ubuntu1.2
1.8.9p4-1ubuntu1
1.8.9p4-1ubuntu2
1.8.9p5-1ubuntu1.1
1.8.3p1-1ubuntu3.1
1.8.3p1-1ubuntu3.2
1.8.3p1-1ubuntu3.3
1.8.3p1-1ubuntu3.4
1.8.3p1-1ubuntu3.6
1.8.3p1-1ubuntu3.7
1.8.20-1
1.8.20p1-1
1.8.20p1-1.1
1.8.20p2-1
1.8.20p2-1ubuntu1
1.8.19p1-1ubuntu2
1.8.19p1-1ubuntu1.2
1.8.17p1-1
1.8.17p1-2
1.8.18p1-1
1.8.18p1-2
1.8.19-1
1.8.19p1-1
1.8.19p1-1ubuntu1
1.8.19p1-1ubuntu1.1
1.8.16-0ubuntu3.3
1.8.16-0ubuntu3.2
1.8.16-0ubuntu3
1.8.16-0ubuntu3.1
1.8.16-0ubuntu2
1.8.16-0ubuntu1.5
1.8.16-0ubuntu1.4
1.8.16-0ubuntu1.3
1.8.16-0ubuntu1.2
1.8.15-1
1.8.15-1.1
1.8.16-0ubuntu1
1.8.16-0ubuntu1.1
1.8.12-1ubuntu3
1.8.12-1ubuntu2
1.7.2p5-1
1.7.2p6-1
1.7.2p7-1
1.7.2p7-1ubuntu1
1.7.2p7-1ubuntu2
1.7.2p7-1ubuntu3
1.7.4p4-1
1.7.4p4-2
1.7.4p4-3
1.7.4p4-4
1.7.4p4-5
1.7.4p4-5ubuntu1
1.7.4p4-5ubuntu2
1.7.4p4-5ubuntu3
1.7.4p4-5ubuntu4
1.7.4p4-5ubuntu5
1.7.4p4-5ubuntu6
1.7.4p4-5ubuntu7
1.7.4p4-5ubuntu8
1.7.4p4-6
1.7.4p6-1
1.7.4p6-1ubuntu1
1.7.4p6-1ubuntu2
1.8.2-1
1.8.2-2
1.8.3-1
1.8.3p1-1
1.8.3p1-1ubuntu1
1.8.3p1-1ubuntu2
1.8.3p1-1ubuntu3
1.8.3p1-1ubuntu4
1.8.3p1-1ubuntu5
1.8.3p1-2
1.8.3p1-3
1.8.3p2-1
1.8.3p2-1ubuntu1
1.8.3p2-1ubuntu2
1.8.5p2-1
1.8.5p2-1ubuntu1
1.8.6p3-0ubuntu1
1.8.6p3-0ubuntu2
1.8.6p3-0ubuntu3
1.8.7-1
1.8.7-2
1.8.7-3
1.8.7-4
1.8.8-1
1.8.8-2
1.8.8-2ubuntu1
1.8.8-2ubuntu2
1.8.8-3
1.8.9p3-1
1.8.9p4-1
1.8.9p5-1
1.8.9p5-1ubuntu1
1.8.9p5-1ubuntu2
1.8.9p5-1ubuntu3
1.8.9p5-1ubuntu4
1.8.9p5-1ubuntu5
1.8.10p3-1
1.8.11p1-1
1.8.11p1-2
1.8.11p2-1
1.8.12-1
1.8.12-1ubuntu1
1.4.5-1
1.4.4-2
1.5-1
1.5-2
1.5.2-1
1.5.2-2
1.5.2-3
1.5.2-4
1.5.2-5
1.5.2-6
1.5.3-1
1.5.4-1
1.5.4-2
1.5.4-3
1.5.4-4
1.5.6p2-1
1.5.6p2-2
1.5.6p5-1
1.5.7p4-1
1.5.7p4-2
1.5.8p1-1
1.5.9p1-1
1.5.9p4-1
1.6-1
1.6-2
1.6.1-1
1.6.2p2-1
1.6.3p5-1
1.6.3p5-2
1.6.3p6-1
1.6.3p7-1
1.6.3p7-2
1.6.3p7-3
1.6.3p7-4
1.6.3p7-5
1.6.4-1
1.6.4p1-1
1.6.5p1-1
1.6.5p1-2
1.6.5p1-3
1.6.5p1-4
1.6.6-1
1.6.6-1.1
1.6.6-2
1.6.6-3
1.6.7p3-1
1.6.7p3-2
1.6.7p5-1
1.6.7p5-2
1.6.8p3-1
1.6.8p3-2
1.6.8p5-1
1.6.8p7-1
1.6.8p9-1
1.6.8p9-2
1.6.8p9-3
1.6.8p9-4
1.6.8p12-1
1.6.8p12-2
1.6.8p12-3
1.6.8p12-4
1.6.8p12-5
1.6.8p12-6
1.6.9p6-1
1.6.9p9-1
1.6.9p10-1
1.6.9p11-1
1.6.9p11-2
1.6.9p11-3
1.6.9p12-1
1.6.9p15-1
1.6.9p15-2
1.6.9p17-1
1.6.9p17-2
1.7.0-1
1.7.0-1ubuntu1
1.7.0-1ubuntu2
1.7.0-1ubuntu3
1.7.2-1
1.7.2-2
1.7.2p1-1
1.7.2p1-1ubuntu1
1.7.2p1-1ubuntu2
1.7.2p1-1ubuntu3
1.7.2p1-1ubuntu4
1.7.2p1-1ubuntu5
1.7.2p1-1ubuntu5.1
1.7.2p1-1ubuntu5.2
1.7.2p1-1ubuntu5.3
1.7.2p1-1ubuntu5.4
1.7.2p1-1ubuntu5.5
1.7.2p1-1ubuntu5.6
1.7.2p1-1ubuntu5.7
1.7.2p1-1ubuntu5.8
Vulnerabilities (12)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU112067 - Protection Mechanism Failure CVE-2025-32462 |
CWE-693 | Low | 1.8.9p5-1ubuntu1.5+esm8, 1.8.16-0ubuntu1.10+esm3, 1.8.21p2-3ubuntu1.6+esm1, 1.8.31-1ubuntu1.5+esm1, 1.9.9-1ubuntu2.5, 1.9.15p5-3ubuntu5.24.04.1, 1.9.15p5-3ubuntu5.24.10.1, 1.9.16p2-1ubuntu1.1 | 01.07.2025 |
SB2025070109 SB2025070111 SB2025070112 and 42 more |
||
| #VU112066 - Protection Mechanism Failure CVE-2025-32463 |
CWE-693 | Low | 1.9.9-1ubuntu2.5, 1.9.15p5-3ubuntu5.24.04.1, 1.9.15p5-3ubuntu5.24.10.1, 1.9.16p2-1ubuntu1.1 | 01.07.2025 |
SB2025070109 SB2025070182 SB2025070238 and 6 more |
||
| #VU74197 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2023-28487 |
CWE-78 | Low | Ubuntu Pro (Infra-only), 1.8.21p2-3ubuntu1.6, 1.8.31-1ubuntu1.5, 1.9.9-1ubuntu2.4, 1.9.11p3-1ubuntu1.3 | 30.03.2023 |
SB2023033028 SB2023033038 SB2023033039 and 28 more |
||
| #VU74196 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2023-28486 |
CWE-78 | Low | Ubuntu Pro (Infra-only), 1.8.21p2-3ubuntu1.6, 1.8.31-1ubuntu1.5, 1.9.9-1ubuntu2.4, 1.9.11p3-1ubuntu1.3 | 30.03.2023 |
SB2023033028 SB2023033038 SB2023033039 and 31 more |
||
| #VU72719 - Double Free CVE-2023-27320 |
CWE-415 | Low | 1.9.9-1ubuntu2.3, 1.9.11p3-1ubuntu1.2 | 02.03.2023 |
SB2023030239 SB2023030240 SB2023033038 and 12 more |
||
| #VU71332 - Improper input validation CVE-2023-22809 |
CWE-20 | Low | Ubuntu Pro (Infra-only), 1.8.21p2-3ubuntu1.5, 1.8.31-1ubuntu1.4, 1.9.9-1ubuntu2.2, 1.9.11p3-1ubuntu1.1 | 18.01.2023 |
SB20230118100 SB20230118104 SB20230118105 and 55 more |
||
| #VU65855 - Improper input validation CVE-2022-33070 |
CWE-20 | Medium | 1.8.21p2-3ubuntu1.5, 1.8.31-1ubuntu1.4, 1.9.9-1ubuntu2.2, 1.9.11p3-1ubuntu1.1 | 28.07.2022 |
SB2022072825 SB2022072828 SB20230118105 and 8 more |
||
| #VU50040 - Heap-based Buffer Overflow CVE-2021-3156 |
CWE-122 | Low | 1.8.3p1-1ubuntu3.10, 1.8.9p5-1ubuntu1.5+esm6, 1.8.16-0ubuntu1.10, 1.8.21p2-3ubuntu1.4, 1.8.31-1ubuntu1.2, 1.9.1-1ubuntu1.1 | 26.01.2021 |
SB2021012632 SB2021012633 SB2021012634 and 55 more |
||
| #VU49883 - Improper Link Resolution Before File Access ('Link Following') CVE-2021-23239 |
CWE-59 | Low | 1.8.16-0ubuntu1.10, 1.8.21p2-3ubuntu1.4, 1.8.31-1ubuntu1.2, 1.9.1-1ubuntu1.1 | 12.01.2021 |
SB2021011282 SB2021011283 SB20210120114 and 14 more |
||
| #VU21782 - Permissions, Privileges, and Access Controls CVE-2019-14287 |
CWE-264 | Low | 1.8.16-0ubuntu1.8, 1.8.21p2-3ubuntu1.1, 1.8.27-1ubuntu1.1 | 15.10.2019 |
SB2019101501 SB2019101502 SB2019101503 and 27 more |
||
| #VU7193 - Improper input validation CVE-2017-1000368 |
CWE-20 | Low | 1.8.16-0ubuntu1.6 | 26.06.2017 |
SB2017062602 SB2017062703 SB2017100803 and 7 more |
||
| #VU2194 - Incomplete List of Disallowed Inputs CVE-2016-7076 |
CWE-184 | Low | 1.8.16-0ubuntu1.6 | 21.12.2016 |
SB2019050612 SB2016102908 |